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1-21. (Canceled) 

22. (Currently Amended) A method for populating password data to a target 
datastore [[ofll associated with a target user authenticato r that is in communication with 
a source user authenticator after migration from [[a]]the source user authenticato r, the 
source user authenticator hav i ng associated with a source datastore comprising 
unencrypted user identification data and user authentication data encrypted with a 
proprietary encryption algorithm , while also responding to user requests for information, 
the method comprising: 

migrating unencrypted data from the source datastore to the target datastore T 
wh e r ei n th e sourc e datastor e compr i s e s us e r i d e nt i f i cat i on data and us e r auth e nt i cat i on 
data, wh e r ei n th e sourc e datastor e i s assoc i at e d w i th a sourc e us e r auth e nt i cator, 
whoro i n tho target datastoro i s assoc i atod w i th a target user authent i cator, and whoro i n 
th e targ e t us e r auth e nt i cator i s i n communication w i th th e sourc e us e r auth e nt i cator ; 

intercepting, w i th an by a servlet interceptor, a request from a user to access 
information protected by the target user authenticator; a r e qu e st to th e sourc e us e r 
authent i cator from a usor sook i ng access to informat i on protected by tho target usor 
auth e nt i cator, wh e r ei n th e i nt e rc e ptor prompts 

prompting, by the servlet interceptor, the user for an identification [[,]]i 

r e c ei v e s receiving, by the servlet interceptor, the identification from the user[[,]]; 

locating, by the servlet interceptor, l ocates a corresponding identification in the 
target datastore[[,]]; [[and]] 
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s e arch e s searching, by the servlet interceptor, the target datastore for a user 
authentication data associated with the corresponding identification; 

determining, by the servlet interceptor, that the target datastore does not include 
a user authentication data associated with the corresponding identification; 

forwarding the or i g i na l intercepted request to the source user authenticator 
responsive to the determining upon dotormin i ng that tho target dotastoro doos not 
i nc l ud e a us e r auth e nt i cat i on data associat e d with th e corr e spond i ng i dent i f i cat i on ; 

us i ng th e sourc e us e r auth e nt i cator to prompt prompting, by the source user 
authenticator, the user for and r e c ei v e the identification and user authentication data; 

receiving, by the source user authenticator, identification and user authentication 
data from the user; 

from th e us e r, monitoring, by a password capture process, the targ e t us e r 
auth e nt i cator: mon i tors the source user authenticator for an approval response[[,]]; 

detecting, by the password capture process, and upon an the approval response 
from the source user authenticator[[,]]; 

captures capturing, by the password capture process, the user authentication 
data provided to the source user authenticator by the user[[,]]; 

popu l ates populating, by the password capture process, the target datastore with 
the captured user authentication data associated with the corresponding identification 
upon detecting the approval response- ^af>4 

assoc i at e s th e captur e d us e r auth e nt i cat i on data w i th th e corr e spond i ng 
i dent i f i cat i on . 
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23. (Previously Presented) The method of claim 22, wherein after populating the 
target datastore, further comprising prompting for and receiving from the user the user 
authentication data associated with the identification. 

24. (Previously Presented) The method of claim 23, wherein the action of 
prompting for and receiving from the user the user authentication data associated with 
the identification comprises prompting for and receiving from the user the identification 
and the user authentication data associated with the identification. 

25. (Currently Amended) The method of claim 22, wherein migrating 
unencrypted data from the source datastore to the target datastore comprises: 

reading unencrypted data from the source datastore, wh e r ei n th e source 
datastor e conta i ns e ncrypt e d us e r auth e nt i cat i on data and oth e r un e ncrypt e d data, 
wherein the unencrypted data represents data for multiple users each having an 
associated user identification and an associated user authentication data; 

converting the unencrypted data to be compatible with the target datastore; and 

populating the target datastore with the converted data. 

26. (Previously Presented) The method of claim 22 further comprising: 
authenticating the received identification using the target user authenticator upon 

determining that the target datastore includes user authentication data associated with 
the corresponding identification. 
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27. (Currently Amended) The method of claim 26, wherein authenticating the 
received identification further comprises prompting for and receiving from the user the 
user authentication data associated with the corresponding identification. 

28. (Previously Presented) The method of claim 22, wherein the target datastore 
is an LDAP compliant directory service. 

29. (Previously Presented) The method of claim 22, wherein the target datastore 
is a relational database. 

30. (Previously Presented) The method of claim 22, wherein the source datastore 
is a relational database. 

31 . (Previously Presented) The method of claim 22, wherein the user is a person. 

32. (Previously Presented) The method of claim 22, wherein the user is a 
software object. 

33. (Previously Presented) The method of claim 22, wherein the user 
authentication data is a password. 
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34. (Previously Presented) The method of claim 22, wherein receiving user 
authentication form a user further comprises: 

prompting for and receiving the identification and the user authentication data 
from the user after the initial submission of the identification from the user. 

35. (Canceled) 
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